Null pointer Excepton: org.opensaml.xml.signature.SignatureValidator.buildSignature

[Keith Kenneth]

Thank you,

Turned out that it is due to the plugin assuming the SessionOnOrAfter
attribute would be within the AuthnStatement:

According to the SAML specification it's not mandatory to have the
"SessionOnOrAfter" attribute within the "AuthnStatement" though the plugin
code checks for that. If it's necessary you can add it by modifying the
buildSAMLAssertion method in ResponseBuilder class.


On Thu, Sep 17, 2015 at 4:35 PM, Brent Putman <putmanb at georgetown.edu>
wrote:

>
>
> On 9/17/15 1:49 PM, Cantor, Scott wrote:
>
> On 9/17/15, 1:43 PM, "dev on behalf of Keith Kenneth" <dev-bounces at shibboleth.net on behalf of kedward778 at gmail.com> <dev-bounces at shibboleth.netonbehalfofkedward778@gmail.com> wrote:
>
>
> Hello,I am very new to this.I am using firefox and SAML tracer to watch the transactions with the idp and sp for my java web app running on tomcat. I can see a successful assertion come back to my sp from the idp, but then when the sp is processing I see the nullPointerException below. Can you please recommend ways to troubleshoot?
>
> That's not a Shibboleth SP (obviously), and it's a bug in the code, not a runtime troubleshooting matter unless you're the one writing the SP of course.
>
>
> Looking at the line numbers in the code, I suspect that the client code
> isn't checking that something is actually signed before trying to validate
> the (non-existent) signature.  I.e. the Assertion or Response's
> getSignature() is returning null, and that null return is being incorrectly
> passed into the method SignatureValidator#validate(Signature).
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150918/cd1a6229/attachment.html>